Skip to content
Get packs

SSRF Security Testing Checklist

Walks an agent through server-side request forgery testing, bypasses, and escalation checks

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

Once installed, the agent follows a structured checklist for finding and testing Server-Side Request Forgery, a web flaw where a server can be tricked into making requests to internal or unintended addresses. It covers spotting likely vulnerable features, setting up callback listeners to detect blind cases, checking cloud metadata endpoints on AWS, GCP and Azure, trying filter bypass methods such as IP encoding, DNS rebinding and redirect chains, and considering how SSRF could be escalated. The agent tracks checklist progress and suggests next steps based on findings.

Great for

  • Security testers doing authorised web application assessments
  • Bug bounty hunters working within a program's scope
  • Developers who want a checklist to review their own URL-fetching features

Skip it if

  • Testing systems you do not own or have written permission to test, since this is offensive methodology and unauthorised use may be illegal
  • People looking for a simple step-by-step fix rather than an attack-oriented checklist; the file only lists techniques and gives no defensive remediation

Try asking

  • “Use the SSRF checklist to review this web app's URL preview feature for server-side request forgery on my authorised test target”
  • “Walk me through blind SSRF detection with a callback listener for this webhook endpoint”
  • “Which SSRF bypass techniques should I try if the app blocks 127.0.0.1 and localhost?”
  • “Help me check for cloud metadata exposure on this AWS-hosted service during an approved pentest”
Step-by-step guide: how to use SSRF Security Testing ChecklistInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-ssrf.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-ssrf.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-ssrf.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • State your authorisation and scope up front so the agent keeps its testing within the agreed targets
  • Provide the specific endpoint and observed behaviour so the agent can pick relevant checks rather than the full list
  • Ask the agent to pair each offensive technique with a defensive mitigation if you need a report for developers

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.